Static task
static1
General
-
Target
DDTankBrasil.exe
-
Size
85.5MB
-
MD5
8a379577fc80fe995c838fb3feb2592c
-
SHA1
f3f6798b47ca1fef4ccfeea88433223132c63c3f
-
SHA256
73ee05acb09d1e1fd44127101ee6bbaf155ea9a0f20abddb987d1d7637fea537
-
SHA512
d62f2a85998e94c0b62e352a55a8dee17ce2fc33a25617d939d735d7cc6240b1489fdf767739e5151f108191a8db1c405859b663008f515ae9ff10dcda85d25a
-
SSDEEP
1572864:pInc0Q6L1sf9NnM5fpu9CJ/WKd0cLsHlQUndK540UxI4v:SnBPufDnAfp5WKdfLgHndhv
Malware Config
Signatures
Files
-
DDTankBrasil.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
4a:c7:86:bc:35:67:96:56:26:58:58:da:02:d3:0e:c8:e6:59:2f:21Certificate
IssuerO=DDTank Launcher / Bombom Launcher / Gunny Launcher,ST=Some-State,C=AUNot Before02-03-2023 22:45Not After27-02-2033 22:45SubjectO=DDTank Launcher / Bombom Launcher / Gunny Launcher,ST=Some-State,C=AU0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before21-09-2022 00:00Not After21-11-2033 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
4a:c7:86:bc:35:67:96:56:26:58:58:da:02:d3:0e:c8:e6:59:2f:21Certificate
IssuerO=DDTank Launcher / Bombom Launcher / Gunny Launcher,ST=Some-State,C=AUNot Before02-03-2023 22:45Not After27-02-2033 22:45SubjectO=DDTank Launcher / Bombom Launcher / Gunny Launcher,ST=Some-State,C=AU0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before21-09-2022 00:00Not After21-11-2033 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
24:93:1e:c1:3c:ab:bb:df:9d:8a:51:2b:35:11:db:80:6d:83:f6:34:a2:f6:ec:01:c7:75:6e:fb:1a:ed:ea:daSigner
Actual PE Digest24:93:1e:c1:3c:ab:bb:df:9d:8a:51:2b:35:11:db:80:6d:83:f6:34:a2:f6:ec:01:c7:75:6e:fb:1a:ed:ea:daDigest Algorithmsha256PE Digest Matchestruee6:75:0d:20:01:b9:03:d9:52:c5:3b:6c:67:68:4d:00:e5:c8:8d:b0Signer
Actual PE Digeste6:75:0d:20:01:b9:03:d9:52:c5:3b:6c:67:68:4d:00:e5:c8:8d:b0Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 85.3MB - Virtual size: 85.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ